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METHODS AND APPARATUS FOR SITE WIDE MONITORTNC OF 
ELECTRONIC MAIL SYSTEMS 

INVENTORS! 



Sathyanarayanan Kavacheri 
Nigel Simpson 
DarylHufr 



10 FIELD OF THE INVENTION 

The present invention relates in general to client/server data communication 
systems and, more particularly, to a mail server included in an electronic mail system for 
use within a client/server data processing system. More particularly still, the present 
invention is directed towards a method and apparatus for monitoring electronic mail 

15 systems. 



BACKGROUND OF THE INVENTION 
Computer systems are well known in the art and have become a business staple 
and are also found in many homes. One feature available to the business world is that of 

20 using electronic mailing (email) to send and receive messages and other information to 
and from one another in a business setting. Similarly, home computers, such as desk 
tops or laptops, and other information devices, such as personal digital assistants 
(PDAs), allow telecommuting such that a user can connect to the user's work server and 
down load and upload messages. 

25 The email system allows clients of a network system, which is maintained by a 

server system, to send messages or data from one user to another. In order to minimize 
disk space and requirements as well as to maximize functionality and consistency of the 
electronic mailing engine used in the networic system, the engine is typically located on 
the server and is merely accessed by a client in order to send messages or retrieve 

30 messages to or from another user or client on the server system. In this way, the client 
system typically allows the user to perform such operations as composing, updating, and 
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sending messages while the server in such a system provides, in part, a server based 
message repository as well as providing message transmission and reception functions 
for the user at the client level. ^ 

A traditional email system 100, configured to operate in what is referred to as a 
5 consumer host mode, is illustrated in Fig. 1 . The email system 100 includes a number of 
consumers and/or businesses 102-1 ("abc.com") through 102-n ("xyz.gov") each of 
which is coupled to a service provider (SP) 104 ("isp.net"). Traditionally, the service 
provider (SP) 104 provides the various consumers and/or businesses 102 with just an 
unprotected IP router. The consumers and/or businesses 102 also operate and maintain 

10 their own application servers, including the email server, DNS server, and (if needed) 
LDAP server (not shown). For their own protection, each of the consumers and/or 
businesses 102 must operate through a firewall that filters out undesirable packets and 
insulates the organization's internal network from the Internet Notice that for many 
organizations, especially small ones, the email server may actually be the firewall 

15 system. 

In the email system 100, those consumers and/or businesses 102-1 through 102-n 
who wish to read their mail must be connected to a service provider (SP) email server 
106. The SP 106 also operates an email mailbox 108, and a DNS server 1 10 that 
provides the following services, a primary master server for the SPs own domain 

20 (ISP.net), to designate as the root server for all consumers and/or businesses, act as a 

primary master server for consumers and/or businesses who do not wish to maintain their 
own public DNS server, and as a secondary server for consumers and/or businesses who 
prefer to maintain their own public server. 

As part of the services provided by the SP 106, an SMTP relay host 112 that is 

25 managed by the SP offers offer a number of value added services, for which the SP may 
charge additional fees. In some cases, the relay host , can be configured to allow the relay 
host to accept and hold the consumer's email when their mail server is down. However, 
unfortunately, the relay host imposes a significant management burden on the SP since 
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in some cases, consumer email may live on this server for an indefinite time raising 
issues of backiq) and failure recovery. If one of the consumer servers fails because of 
being swamped, for example, then the consumer's email may roll over to the SP's relay 
host. Because of this, most SPs do not offer a relay host for those consumers and/or 
5 businesses that are hosting their own email server. The SP also provides a directory 
service in the form of the LDAP Directory server that is located at the consumer's site, 
which can be operated by the consumer. In this way, most organizations do not expose 
their LDAP servers to the public network for security reasons. 

In the example shown in Fig. 1, a mail user in ABC, Inc. (which lawfully owns 
10 its DNS domain name abc.com^ but relies on the ISP isp,net to host its email) desiring to 
send and receive mail uses the domain name usemame@abc.com even though his 
mailserver is really mailhost.isp.net. It also means that any user in the abc.com domain, 
connects to a mailhost in the domain abc.com - for example mailabc.com - to access 
his/her mail. 

15 Since the email system 100 requires a separate mail server to be supported by the 

SP 106 for each of the domains abc.com through xyz.gov, although well understood and 
easy to manage, the email system 100 is not cost effective for small domains. In 
addition, as the number of domains increases, the management of the individual services 
becomes increasingly unwieldy. Internet service providers (ISPs) have a growing 

20 interest in hosting email services for always larger and more numerous organizations. 
Many businesses see the ability to fami out email services as a very attractive cost- 
saving idea. It is therefore desirable that an email service provider be able to offer email 
services to multiple organizations each of which has their own virtual domain and to 
support the ability to define such domains in the directory and host them on a shared 

25 mail server. Thus, an email architecture that can support a single mail server which, in 
tum, can support many different domains associated with consumers and/or businesses is 
desirable. Among other things, this email architecture would be useful for a mail service 
provider such as ISP 104. 

3 
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In addition, it would be useful to provide monitoring capabilities for electronic 
mail systems that include a service provider serving several domains associated with 
different consumers and/or businesses. However, given the complexity of such an email 
system, it is typically difficult to isolate a problem. Furthermore, it would be desirable 
5 to provide a monitoring system that is capable of isolating and automatically alerting the 
users of problems that may exist with the electronic mail system. 

In view of foregoing, there is a need to provide for methods and ^paratus for 
monitoring electronic mail systems capable of supporting multiple domains. 



4 
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Summary qf t he IwyE^fT]low 

According to the present invention, a standards-based messaging system is 
disclosed. The disclosed messaging system includes a mail server capable of offering 
5 email services to multiple organizations each of which having their own virtual domain. 
In addition, the messaging system is capable of providing monitoring capabilities that 
may be exercised locally be organizations that are served by the mail server. In 
accordance with one aspect of this invention, a messaging system including a monitoring 
system is disclosed. Advantageously, a remote user located in an organization served by 

10 a mail server, can perform a variety of monitoring tasks remotely. Furthermore, 

monitoring can be done automatically without requiring a local administrator to have 
knowledge about the specific implementation details about services such as IMAP, POP, 
SMTP, IDAP provided by the mail server. 

As an email server having at least one email server component, an email 

IS performance parametjer monitor for monitoring an email server component performance 
parameter associated with the email server component, one embodiment of the invention 
includes: a test message transmitter coupled to the mail server component suitably 
arranged to transmit a test message to the email server component; a component 
response message receiver coupled to the email performance parameter monitor suitably 

20 arranged to receive a component response message from the component that is based 
upon the test message; a comparator unit coupled to the component response message 
receiver arranged to determine the email server component performance parameter based 
upon the component response message and the test message; a data storage unit coupled 
to the comparator unit arranged to store the detemimed email server component 

25 performance parameter; and a display device coupled to the data storage unit for 
displaying the determined email server component performance parameter. 



5 
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As a mail performance monitgo: suitable for monitoring the electronic mail 
services provided by an electronic mail server, one embodiment of the invention 
provided a monitoring interface suitable initiate a set of monitoring commands to 
perform monitoring tasks associated with the mail services provided by one or more 
5 components of the mail server. 

As a computer readable media including computer program code for monitoring 
electronic mail services provided by an mail server, one embodiment of the invention 
includes computer program code for providing a monitoring interface that can be used to 
initiate a set of monitoring commands to perform monitoring tasks associated with the 
10 mail services provided by one or more components of the mail server. 



15 
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BRIEF DESCRTPTTQN OF THE DRAWINGS 

The present invention is illustrated by way of example, and not by way of 
limitation, in the figures of the accompanying drawings and in which like reference 
S numerals refer to similar elements and in which: 

Fig. 1 illustrates a conventional customer hosted type e-mail system. 

Fig. 2 shows an Internet email system in accordance with an embodiment of the 
invention. 

Fig. 3 shows an exemplary message store in accordance with an embodiment of 
10 the invention. 

Fig. 4 shows a flowchart detailing a process whereby a virtual domain is defined 
in accordance with an embodiment of the invention. 

Fig. 5 illustrates a messaging system including a mail monitoring system coupled 
to a mail server, in accordance with an embodiment of the invention 
15 Fig. 6 illustrates an exemplary mail monitoring system, in accordance to one 

embodiment of the present invention. 

Fig. 7 illustrates a typical general-purpose computer system suitable for 
implementing the present invention. 



7 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Reference will now be made in detaikto a preferred embodiment of the invention. 
An example of the preferred embodiment is illustrated in the accompanying drawings. 
5 While the invention will be described in conjunction with a preferred embodiment, it 
will be understood that it is not intended to limit the invention to one preferred 
embodiment. To the contrary, it is intended to cover alternatives, modifications, and 
equivalents as may be included within the spirit and scope of the invention as defined by 
the appended claims. 

10 The Internet has effectively lowered the cost of electronic commimication. As the 

number of people and organizations connected to the Internet has grown, the Internet has 
evolved into a new channel for communication. To facilitate Internet services, Intemet 
messaging clients and easy-to-use web browsers have provided cost-effective way of 
publishing and sharing information with employees inside the enterprise as well as 

IS customers, suppliers, and partners outside. Since messaging services has become crucial 
to enterprise infi:astructure in the 1990s, organizations are seeking messaging solutions 
that provide a lower cost of ownership while increasing the effectiveness and reliability 
of their communications network. Specifically, they are evaluating the benefits of 
Intemet standards-based messaging systems. 

20 Broadly speaking, the invention describes an Intemet standards-based messaging 

system having a mail server capable of offering email services to multiple organizations 
each of which has their own virtual domain. The invention is also able to define such 
virtual domains in the directory and host them on a shared email server. It should be 
noted that such a messaging system may provide other services such as calendar and 

25 voicemail. 

In addition, the messaging system is capable of providing monitoring capabilities 
that may be exercised locally be organizations that are served by the mail server. In 
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accordance with one aspect of this invention, a messaging system including a monitoring 
system is disclosed 

Advantageously, a remote user located in an organization served by a mail server, 
can access the directory services to perform a variety of monitoring tasks remotely. 
5 Furthermore, monitoring can be done automatically without requiring a local 
administrator to have knowledge about the specific implementation details about 
services such as IMAP, POP, SMTP, BDAP provided by the mail server. 

The invention will now be described in terms of an intemet mail server resident 
on a server computer coupled to a large network of mailboxes typical of a large 
10 corporate intranet system as well as a single user coupled to a large interconnected 
computer network such as the Intemet. It should be noted, however, that the inventive 
mail server in the described embodiment is well suited to any application requiring 
highly reliable, scalable, and ef&cient information transport over a large number of 
computers. 

15 Referring now to Fig. 2, an Intemet email system 300 in accordance with an 

embodiment of the invention includes an Intemet mail server 301 coupled to a user 
mailbox 303. In the described embodiment, the mail server 301 is a general-purpose, 
**store-and-forward" system for distributing computer-based mail. It should be noted 
that the term "store-and-forward" means that the mail server 301 automatically handles 

20 the receiving of mail messages necessitated when network links (such as those links 306 
to the Intemet) or other services are temporarily unavailable. In contrast to mail user 
agents (MUAs) that are used to create and read electronic mail messages, a transfer unit 
302 included in the mail server 301 is responsible for directing messages to the 
appropriate network transport and ensuring reliable delivery over that transport. In a 

25 preferred embodiment, the mail server 301 includes a message store unit 304 coupled to 
the transfer unit 302 that is used to store messages for later transmission to the user 
mailbox 303. 



9 
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As shown in Fig. 3, in one implementation, the message store 304 in the mail 
server 301 is a dedicated data store for the delivery, retrieval, and manipulation of 
Internet mail messages. In a preferred embodiment, the message store works with the 
IMAP4 and P0P3 to provide flexible and easy access to messaging. It saves any 
5 message that conforms to RFC 822 specifications, and recognizes the Multipxupose 
Internet Mail Extensions (MIME) content format. 

In the described embodiment, the message store 304 is organized as a set of 
folders and user mailboxes. The mailbox 401 is a container for messages where each 
user has an inbox 402 where new mail arrives, and can have one or more folders 404 

10 where mail can be stored. Folders 404 may contain other folders or mailboxes and may 
be arranged in a hierarchical tree. Mailboxes owned by an individual user are private 
folders 406. In addition to a user owning a folder or a mailbox, a common user or group 
can share the ownership of a folder or mailbox as a shared folder 408. A shared folder is 
similar to an email group, but instead of messages going into each member of the email 

15 group's inbox, messages addressed to the shared folder 408 go into a private folder 
associated with each user. It should be noted that in a preferred embodiment, the 
message store 304 maintains only one copy of each message. However, in those cases 
where the message store 304 receives a message addressed to multiple users or a group 
(based upon an associated distribution list), it adds a reference to the message in each 

20 user's inbox rather than having a copy of the message in each user's inbox, thereby 
saving disk space. In addition to the reference, the individual message's status (new, 
unread, replied to, deleted, and the like) is maintained per mailbox. 

In the described embodiment, access to the message store 304 is multithreaded 
thereby allowing a single process to manage a large number of connections since each 

25 connection is handled by a thread. In this way, multithreaded access maximizes both 
performance and scalability by minimizing the system resources required for the 
management of each connection. 

10 
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Referring back to Fig. 2, the delivery and routing of messages by the transfer unit 
302 is based on a routing table 3 1 0 that in turn is derived from the user and group 
(distribution list) entries stored in a directory; service unit 312. In a preferred 
embodiment, the directory service unit 312 is the central repository for meta- 
5 information: user profiles, distribution lists, and other system resources based upon, in 
some embodiments, a dedicated Lightweight Directory Access Protocol (LDAP) 
directory service. This directory supports the storage of information according to a 
directory mformation tree (DIT) which is a hierarchical structure that resembles a tree 
with one major branch at the top and many branches and sub-branches below. The 

10 arrangement of the tree is flexible, allowing administrators to decided how to best deploy 
the service for their organization. For some, it may be best to arrange the tree according 
the actual business organizational structure or geographic structure. For others, however, 
a one-to-one mapping to DNS layers may be best. 

The DIT also provides the flexibility to support a wide range of administration 

1 5 scenarios, and can be administered in either a centralized or distributed manner. 

Centralized administration can be implemented where one authority manages the entire 
DIT. This type of administration is usually used in scenarios where the entire DIT 
resides on one mail server. 

In order to properly route a message, the transfer unit 302 must access the 

20 directory information associated with each message that it processes. However, in a 
preferred embodiment, rather than querying the directory service 312 directly each time 
it processes a message, the transfer unit 302 caches the directory information in a 
directory cache 314. When the transfer luiit processes a particular message, it accesses 
the appropriate directory information in the cache 314. When required, the transfer unit 

25 302 uses the directory information in the cache 314 to update the routing table 312. 

Since a directory query for each recipient of each message is time-consuming and 
puts a large load on the mail server 301, by implementing the localized directory cache 
314, performance of the email server 301 is improved. In addition, since the information 

11 
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Stored in the directory service unit 310 is not always in the format required by the 
transfer unit 302, when creating the cache, the transfer unit reformats the directoiy 
infonnation as required. 

It should be noted that in most embodiments, a the transfer unit 302 can be 
5 configured to adhere to various mail delivery options which specify one or more delivery 
options for inbound email to a designated recipient. While inbound messages can be 
delivered into multiple message stores, message access servers (MAS) can read 
messages from only a designated one of them. The transfer unit 302 uses these attributes 
to determine the targets of message delivery for all messages submitted to a particular 
10 distribution Ust, Such attributes can include, but are not Umited to : "autoreply", 

'*program" where mail is delivered to a program, "forward" where mail is forwarded to 
another mailbox(es), "file" where the incoming message file is appended to another file, 
and "shared" where mail is delivered to a shared mailbox (this is typically used to set up 
a shared mailbox for a distribution list). 

15 In the context of electronic mail, protocols are generally a high-level (not 

necessarily network specific) language spoken between two mailers. Transports are the 
low-level, network specific details used to implement a protocol on a given network. 
Thus email messages can come in to the transfer unit 302 by any one of a variety of 
transports and protocols-submitted directly by a local user, via TCP/IP as an SMTP 

20 message &om an Internet system, by using a dial-up modem using the PhoneNet 
protocol, DECnet as a MAIL-1 1 message, DECnet as an SMTP message, UUCP, an 
X.400 transport, SNA, and so on. The transfer unit 302 then routes the message out 
using a transport and protocol appropriate for the message's destination address. 

In the described embodiment, the transfer unit 302 uses what are referred to as 
25 channels to implement specific combinations of transports and protocols. Each different 
transport and protocol combination has an associated transfer unit channel. The transfer 
unit 302 postmaster initially configures the transfer unit 302 telling it what sorts of 
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transports and protocols are in use at his site, and what sorts of destination addresses 
should be routed through which sorts of channels. For instance, at sites with an Internet 
connection, Internet addresses are normally rputed through an SMTP over TCP/IP 
channel; but at sites with only a UUCP connection, Internet addresses would instead be 
5 routed through a UUCP channel. Once the transfer unit 302 is so configured using 
configuration data stored in a configuration table (not shown), the transfer unit 302 
handles message routing and delivery automatically. In this way, ordinary users need 
never be aware of this underlying transport and routing; that is, they simply address and 
send their messages and the transfer unit 302 automatically routes and delivers them 
10 appropriately. 

In most embodiments, the transfer unit 302 stores messages as text files. 
Messages with multiple parts (possibly containing different types of data) are 
rq>resented as a series of text sections separated by special unique delimiter strings. In 
the described embodiment, the first few files in each email message are referred to as the 

15 message envelope that contains transport information. The message envelope is 

terminated by a line containing a boundary marker, or by a line containing two CTRL/A 
characters. The transfer unit 302 uses the contents of the envelope to make routing 
decisions. It does not use the content of the message. The content of the envelope is 
primarily defined by RFC 821. It includes the originator address, the recipient(s) 

20 address(es), and envelope ID. 

The header lines of the message follow the envelope whose format is mandated 
by RFC 822. It should be noted that there may be any number of message header lines; 
the message header formed by this collection of header lines is terminated by a single 
blank line after which follows the message body. An Internet mail message starts with 

25 one or more headers. Each header is composed of a field name followed by a colon then 
a value which can be generated by, for example, the composer of a message or the mail 
client. A transfer unit can also add headers to a message. Each transfer unit that accepts 
a message adds a received header to that message. The last transfer unit to accept the 

13 
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message and to actually deliver the message to the message store adds a return-path 
header. The received and return-path headers provides information that enables you to 
trace the routing path taken by the message i£a problem occurs. 

Submitted messages from the Internet or local clients go to the transfer unit 302 
5 via SMTP (Simple Mail Transport Protocol). If the message address is within the server 
302 domain, the transfer unit 302 delivers the message to the message store 304. If, 
however, the message is addressed to another domain, the transfer unit 302 relays the 
message to another transport agent on the Internet or Intranet. 

In a preferred embodiment, messages to the local domain are stored in the 

10 message store 304 depending on how the system is configured. Once messages are 
delivered to the appropriate mailbox, they can be retrieved, searched for, and 
manipulated by IMAP4 or P0P3-based mail clients. The transfer unit 302 uses the 
directory 3 1 2 that, in a preferred embodiment, is configured as an LDAP type directcwry, 
to retrieve local user and group address information. When the transfer unit 302 receives 

15 a message, it uses the directory information to determine where the message should be 
delivered. The message store uses the directory services to authenticate users logging 
into their mailboxes. The message store 304 also obtains information about user 
message quota limits and message store type (IMAP or POP). Outgoing client messages 
go to the SMTP channel in the LDAP. The transfer unit 302 sends the message to an 

20 Internet transfer or, if the address is local, to the message store 304. It should be noted 
that the LDAP directory 312 is the master repository of all the information related to 
hosted domains. That is, the message access server retrieves the necessary information 
to associate a client with a domain fi-om the LDAP directory 312. Similarly, the transfer 
unit 302 retrieves hosted domain information fi:om the LDAP directory 3 12 to perform 

25 proper routing and address rewriting. 

Referring now to Fig. 4, showing a flowchart that details a process 500 for 
defining a virtual domain in accordance with an embodiment of the invention. The 
process 500 begins at 502 by defining a virtual domain node in the DIT. Once a the 

14 
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virtual domain node has been defined, corresponding routing table entries are defined at 
504 and at 506, various virtual domain attributes are stored at the virtual domain node. It 
should be noted that the various virtual domain attributes include a list of services 
permitted the domain. Such services include IMAP, IMAPS, POPS, P0P3S, SMTP 
5 which, in some cases requires presentation of credentials. Other of the services includes 
identification of a domain administrator who is authorized to manage the particular 
virtual domain which includes setting particular user-level attributes for particular users 
in the domain. 

Fig. 5 illustrates a messaging system 600 including a mail monitoring system 602 

10 coupled to a mail server 604 in accordance with one embodiment of the invention. In the 
described embodiment, the mail server 604 provides mail service to domain, -domain^, 
each of which is associated with a virtual domain in the mail server 604. In this way» the 
mail server 604 provides mail service to these domains each of which, in turn, provides 
email services for several users (userj-userj included therein. 

15 In the mail messaging system 600, it is possible to monitor various components 

that make up the system. By way of example, the mail monitoring system 602 can be 
used in conjunction with the mail server 604 to determine whether mail service 
components such as transfer units, message stores, directory services are operating (or 
available for operation). In addition, the response time of various components of the 

20 mail messaging system 600 can be measured by the mail monitoring system 602. The 
mail monitoring system 602 can provide information about resources such as disk space, 
virtual memory, etc. Furthermore, security of the messaging system can be monitored 
and notification of attempts to breach the security can be provided. 

The mail monitoring system 602 is coupled to a data storage device 606. 

25 Information about significant events in the operation of the mail messaging system 600 
can be captured by the mail monitoring system 602 and stored in the data storage device 
606. In one embodiment, the information is captured in various log files. Since manual 
analysis of log files is impractical, the mail monitoring system 602 provides a number of 

15 
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monitoring tools that can extract information from the log files to perform useful 
analysis. For example, the extracted information can be used to determine number of 
connections that were established in a particular day» the total number of connections 
that were lost, and so on. In addition, error information can be captured and provided by 
5 the mail monitoring system 602. In one embodiment, errors are logged in error log files 
that are stored in the data storage device 606. The stored log files can be analyzed by the 
mail monitoring system 602 to provide useful diagnostic information. 

In addition to error logging, the mail monitoring system 602 can be used to 
determine the response time of various components of the mail server 604. In 

10 accordance with one embodiment of the present invention, the mail monitoring system 
602 initiateis test e-mails to measure the overall responsiveness of the mail messaging 
system 600, as well as the responsiveness of individual service components such as, 
POP, IMAP, LDAP, and SMTP associated with the mail server 604. In this way, the 
mail monitoring system 602 can isolate a performance related problem(s) with the mail 

15 servers 604. 

In addition to determining the responsiveness of the mail servers 604, the mail 
monitoring system 602 is enable of providing notification when a problem is identified. 
In one embodiment, a measured response time is compared with threshold values that 
indicate what the normal response time should be. By way of example, these threshold 

20 values can be the expected times for LDAP response, POP/IMAP retrieval time, total 
round trip for test emails, etc. 

Fig. 6 illustrates an exemplary mail monitoring system 702, in accordance to one 
embodiment of the present invention. The mail monitoring system 702 includes a 
test/monitor 704, a notifier 706, and a comparator 708. As shown in Fig. 7, the mail 

25 monitoring system is coupled to a data storage device 710 where threshold values Tl, 
T2, and T3 can be stored. As mentioned earlier, the threshold values Tl, T2, and T3 
could represent the expected response times under normal conditions for an e-mail 
system. It should be noted that the threshold values may vary for different 

16 
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configurations and there may be different expected values for the same configuration 
depending on other factors. For example, the response time during business hours may 
have a longer threshold than the response tim^ expected during weekends. In any case, 
appropriate threshold values can be can be selected and stored in data storage device 
710. 

In one implementation, the test/monitor 704 can initiate a test email 712 to 
determine whether a mail messaging system is functioning according to the expected 
threshold. By doing so, the test email 712 travels through a distributed messaging 
system. As shown in Fig 6, different components of an email server 714, for example, a 
transfer unit, a message store, a directory service can exist on different servers such as 
servers 716, 718, and 720. After initiating the test e-mail 712, test/monitor 704 can 
measure the actual response times rtl, rt2, and rt3 corresponding to individual 
components of the distributed email server 714. The measured response times rtl, rt2, 
and rt3 can be stored in the data storage device 710, by the test/monitor 704. Once 
actual response values have been detennined, the comparator 708 can access data storage 
device 710 to compare actual response times rtl, rt2, rt3 with their corresponding 
threshold values Tl, T2, and T3. 

In one embodiment, the mail monitoring system 702 may be invoked by a local 
system administer who desires to identify a problem with the mail services provided by 
the mail server 714. In this way, the mail monitoring system can be configured to 
automatically check the status of an email system by measuring actual response values 
and comparing them with the corresponding threshold values. If a problem is detected, 
for example, when an actual response time is slower than the excepted threshold value, 
the comparator 708 can send a signal with appropriate information to the notifier 706. 
An error notification with the appropriate information can be displayed on a monitoring 
screen 722 that is connected to the notifier 706. In this way, a human operator can be 
expeditiously notified of an isolated problem with the mail services. 
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In addition, a user, such as a system administrator, may interact with the 
monitoring screen 722 to perform monitoring tasks. In one embodiment, monitoring 
conunands can be issued to perform various monitoring tasks such as determining the 
size of queues for the transfer imit channels, checking the status of the system resources, 
5 providing a summary of Mail submitters, etc. 

Fig, 7 illustrates a typical, general-purpose computer system 800 suitable for 
implementing the present invention. The computer system 800 includes any number of 
processors 802 (also referred to as central processing units, or CPUs) that are coupled to 
memory devices including primary storage devices 804 (typically a read only memory, 
10 or ROM) and primary storage devices 806 (typically a random access memory, or 
RAM). 

As is well known in the art, ROM acts to transfer data and instructions uni- 
directionally to the CPUs 802, while RAM is used typically to transfer data and 
instructions in a bi-directional manner. CPUs 802 may generally include any number of 

15 processors. Both primary storage devices 804, 806 may include any suitable computer- 
readable media. A secondary storage mediimi 808, which is typically a mass memory 
device, is also coupled bi-directionally to CPUs 802 and provides additional data storage 
capacity. The mass memory device 808 is a computer-readable medium that may be 
used to store programs including computer code, data, and the like. Typically, mass 

20 memory device 808 is a storage medium such as a hard disk or a tape which generally 
slower than primary storage devices 804, 806. Mass memory storage device 808 may 
take the form of a magnetic or paper tape reader or some other well-known device. It 
will be appreciated that the information retained within the mass memory device 808, 
may, in appropriate cases, be incorporated in standard fashion as part of RAM 806 as 

25 virtual memory. A specific primary storage device 804 such as a CD-ROM may also 
pass data uni-directionally to the CPUs 802. 

CPUs 802 are also coupled to one or more mput/output devices 810 that may 
include, but are not limited to, devices such as video monitors, track balls, mice. 
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keyboards, microphones, touch-sensitive displays, transducer card readers, magnetic or 
paper tape readers, tablets, styluses, voice or handwriting recognizers, or other well- 
known input devices such as, of course, othercomputers. Finally, CPUs 802 optionally 
may be coupled to a computer or telecommunications network, e.g., an Intemet network 
5 or an intranet network, using a network connection as shown generally at 812. With 
such a network connection, it is contemplated that the CPUs 802 might receive 
information from the network, or might output information to the network in the course 
of performing the above-described method steps. Such information, which is often 
represented as a sequence of instructions to be executed using CPUs 802, may be 

10 received from and outputted to the network, for example, in the fonn of a computer data 
signal embodied in a carrier wave. The above-described devices and materials will be 
familiar to those of skill in the computer hardware and software arts. 

Although only a few embodiments of the present invention have been described, 
it should be understood that the present invention may be embodied in many other 

15 specific forms without departing from the spirit or the scope of the present invention. 
Therefore, the present examples are to be considered as illustrative and not restrictive, 
and the invention is not to be limited to the details given herein, but may be modified 
within the scope of the appended claims along with their ftiU scope of equivalents. 
What is claimed is: 
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In the claims: 

1. In a messaging system having a message server that includes at least one 
5 message server component, an message server performance parameter monitor for 

monitoring a message server component performance parameter associated with the 
message server component, comprising: 

a test message transmitter coupled to the message server component suitably 
arranged to transmit a test message to the message server component; 
10 a component response message receiver coupled to the message performance 

parameter monitor suitably arranged to receive a component response message from the 
component that is based upon the test message; 

an evaluator unit coupled to the competent response message receiver arranged 
to determine the message server component performance parameter based upon the 
1 5 component response message and the test message; 

a data storage unit coupled to the comparator unit arranged to store the 
determined message server component performance parameter; and 

a display device coupled to the data storage unit for displaying the determined 
message server component performance parameter. 

20 

2. A monitor as recited in claim 1, wherein the message is an email message 
and wherein the message server is an email server and wherein the message server 
component is an email server component. 

25 3. A monitor as recited in claim 2, wherein the performance parameter is 

one of a pliurality of email component performance parameters and wherein the email 
server component is one of a plurality of interconnected email server components. 

20 . 
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4. A monitor as recited in claim 3, wherein at least one of the plurality of 
email server component performance parameters is a component response time. 

5. A monitor as recited in claim 4, wherein the component response time is 
S based upon a time period between the transmission of the test message from the test 

message transmitter and the receiving of the component response message by the 
component response message receiver as determined by the comparator. 



6. A monitor as recited in claim 5, wherein the component response time is 
10 periodically recalculated. 



7. A monitor as recited in claim 6, 

wherein the email performance parameter monitor ccnnpares at least one of the 
periodically calculated response times with a threshold value response time that 
15 represents an response time expectation value; and 

wherein the email performance parameter monitor operates to provide an error 
notification when the at least one measured response time exceeds the threshold vahie 
response time. 



20 8. A monitor as recited in claim 2, wherein mail server component is 

selected from the group comprising a transfer unit, a messaging store, and a directory 
server. 



9. A monitor as recited in claim 2, wherein the mail performance monitor 
25 operates to monitor various virtual domain attributes associated with the one or more 
virtual host domains. 
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10. A monitor as recited in claim 9, wherein the various virtual domain 
attributes include IMAP, IMAPS, POPS. P0P3S, LDAP, and SMTP. 

11. A monitor as recited in claim 2, wherein the monitor operates to log email 
5 activities associated with the one or more virtual host domains in the data storage. 

12. A mail performance monitor as recited in claim 2, wherein the monitor 
operates to display monitoring information associated with the one or more virtual host 
domains. 

10 

13. In an electronic mail messaging system, 

a mail performance monitor suitable for monitoring the electronic mail services 
provided by an electronic mail server, the mail perfonnance monitor providing a 
monitoring interface that can be used to initiate a set of monitoring commands to 
15 perform monitoring tasks associated with the mail services provided by one or more 
components of the mail server. 

14. A mail performance monitor as recited in claim 13, wherein the set of the 
monitoring commands provides the ability to initiate a test mail message; and wherein 

20 the monitoring interface can provide measurements of response times associated with of 
one or more components of the mail server when the test mail is initiated. 

15. A mail performance monitor as recited in claim 14, wherein the set of the 
monitoring commands provides the ability to capture activities associated with one or 

25 more virtual host domains of the mail server in one or more log files; and wherein the 
monitoring interface provides tools that can be used to analyze the one or more log files 
to generate error notifications. 

22 
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16. A mail performance monitor as recited in claim 15, wherein the 
monitoring interface provides error notification for the mail services provided through 
one or more virtual host domains of the electronic mail server. 

1 7. A mail performance monitor as recited in claim 16, wherein the set of the 
monitoring commands can be initiated to provide information about mail messaging 
resources associated with the mail server. 

18. A computer readable media including computer program code for 
monitoring electronic mail services provided by an mail server, the computer program 
code providing a monitoring interface that can be used to initiate a set of monitoring 
commands to perform monitoring tasks associated with the mail services provided by 
one or more components of the mail server. 

19. A computer readable media as recited in claim 18, wherein the computer 
readable media further comprises: 

computer program code for capturing activities of one or more virtual host 

domains of the electronic mail server in one or more log files; 

computer program code for analyzing the one or more log files; and 

computer program code for generating error notifications based on the analyzing 

the one or more log^files. 

20. A computer readable media as recited in claim 19, wherein the computer 
readable media further comprises: 

computer program code for measuring response times associated with one or 
more components of the mail server. 
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